Okta Professional Exam preparation
3 Types of accounts that can exist within Okta – answer Okta Mastered
Directory Mastered
Application Mastered people
SAAS – answer Software as a Service is a software licensing and delivery model in
which software is licensed on a subscription basis and is centrally hosted. SaaS is
typically accessed by users using a thin client via a web browser.
IAM – answer Who you are. What you are able to do. Who you can interact with.
Authentication > Authorization > Privileges. In computer security, the security and
business discipline that "enables the right individuals to access the right resources at
the right times and for the right reasons".
IDaaS - answer An authentication infrastructure that is built, hosted and managed by a
third-party service provider. Thought of as single sign-on (SSO) for the cloud. The
challenges to SaaS and the advantages over on-premises solutions Challenge >
Complexity quickly increases with the number of cloud based applications with different
password requirements and expiration cycles. Advantage > alleviate concerns by
providing SSO across applications.
SAML - How When Why - answerAn open standard for exchanging authentication and
authorization data between parties, in particular, between an identity provider and a
service provider. Best for proprietary non-consumer apps. Safest federated
authentication standard.
WS FEDeration: How, When & Why - answerExtends WS-Trust to provide a flexible
Federated Identity architecture with clean separation between trust mechanisms,
security token formats, and the protocol for obtaining tokens. In the WS-Federation
Model an Identity Provider is a Security Token Service (STS).
IDP (Identity Provider) vs SP (Service Provider) - answerinitiated sign on flows(IdP) An
online service or website that authenticates users on the Internet by means of security
tokens, one of which is SAML 2.0.
Benefits of using Federation vs Password Vaulting (Secure Web Application) -
answerFederation exchanges credential info between IdP and SP vs storing multiple
user passwords in a secure digital location.
Advantages of Okta Application Network (OAN) Privacy, Security, Efficiency -
answerEnable admins to create new SWA apps leveraging OKTA security features.
While creating the new app it's possible to hide from end user during its creation. Once
, this app is created the OAN will include on their Quality Assurance to guarantee that it
works and also that receives updates when is needed
Describe browser plug-ins and (how to troubleshoot issues) - answerThe Okta browser
plugin enables you to automatically sign into applications that would otherwise require
you to manually enter your credentials (e.g., applications that do not support SAML or a
direct form POST to a URL). Using the plugin enables you to use SSO for a broader
range of applications. To enhance security, the plugin only works with trusted and
verified sites. If you have not installed the browser plugin but you have one or more
applications that require it, a notice is published on your applications page along with a
link to the plugin installation file
-Automatic app sign-in
-Automatically initiate an Okta login
-Automatically fills in credentials on sign-in pages
-Automatically inserts passwords on "password update" pages
-Monitors password updates
Explain the reveal password feature - answerThe Password reveal feature allows end
users to see the passwords of their apps. This is especially useful if end users need to
reenter a long, complicated, and randomly-generated password into another device.
For this feature to to work:
An admin must enable Password reveal for the particular app.
The end user must have permissions to manage the app's password.
End users cannot reveal the password of an app configured with shared credentials.
The difference between Okta Mobile and Okta Mobility Management (OMM) -
answerOkta Mobility is the feature that embraces all the functions relate to use Okta
anywhere. Okta Mobile is the app that makes it possible providing the features for users
to login anywhere/anytime
Define Okta Mobile and Okta Mobility Managemen (OMM) capabilities and the customer
value proposition - answerOkta Mobile is a SSO app that gives you access to all your
applications with a single tap. OMM enables to manage end user's mobile device,
application and data. The admin can manage policies, remove apps from the list and
also wipe out data from user's device at any time
Describe Universal Directory (UD) as a user store and hub for Identity Management. -
answerUD is an interface between applications such as importing users from AD then
customizing attributes to be pushed into SalesForce. Also UD can have custom
attributes for specific apps such as manager's email then provision/push it to the app
Define user profiles, user attributes and App User profile in Okta - answerUser profile is
a logical group of attributes that represents an account. User attributes. User attributes
3 Types of accounts that can exist within Okta – answer Okta Mastered
Directory Mastered
Application Mastered people
SAAS – answer Software as a Service is a software licensing and delivery model in
which software is licensed on a subscription basis and is centrally hosted. SaaS is
typically accessed by users using a thin client via a web browser.
IAM – answer Who you are. What you are able to do. Who you can interact with.
Authentication > Authorization > Privileges. In computer security, the security and
business discipline that "enables the right individuals to access the right resources at
the right times and for the right reasons".
IDaaS - answer An authentication infrastructure that is built, hosted and managed by a
third-party service provider. Thought of as single sign-on (SSO) for the cloud. The
challenges to SaaS and the advantages over on-premises solutions Challenge >
Complexity quickly increases with the number of cloud based applications with different
password requirements and expiration cycles. Advantage > alleviate concerns by
providing SSO across applications.
SAML - How When Why - answerAn open standard for exchanging authentication and
authorization data between parties, in particular, between an identity provider and a
service provider. Best for proprietary non-consumer apps. Safest federated
authentication standard.
WS FEDeration: How, When & Why - answerExtends WS-Trust to provide a flexible
Federated Identity architecture with clean separation between trust mechanisms,
security token formats, and the protocol for obtaining tokens. In the WS-Federation
Model an Identity Provider is a Security Token Service (STS).
IDP (Identity Provider) vs SP (Service Provider) - answerinitiated sign on flows(IdP) An
online service or website that authenticates users on the Internet by means of security
tokens, one of which is SAML 2.0.
Benefits of using Federation vs Password Vaulting (Secure Web Application) -
answerFederation exchanges credential info between IdP and SP vs storing multiple
user passwords in a secure digital location.
Advantages of Okta Application Network (OAN) Privacy, Security, Efficiency -
answerEnable admins to create new SWA apps leveraging OKTA security features.
While creating the new app it's possible to hide from end user during its creation. Once
, this app is created the OAN will include on their Quality Assurance to guarantee that it
works and also that receives updates when is needed
Describe browser plug-ins and (how to troubleshoot issues) - answerThe Okta browser
plugin enables you to automatically sign into applications that would otherwise require
you to manually enter your credentials (e.g., applications that do not support SAML or a
direct form POST to a URL). Using the plugin enables you to use SSO for a broader
range of applications. To enhance security, the plugin only works with trusted and
verified sites. If you have not installed the browser plugin but you have one or more
applications that require it, a notice is published on your applications page along with a
link to the plugin installation file
-Automatic app sign-in
-Automatically initiate an Okta login
-Automatically fills in credentials on sign-in pages
-Automatically inserts passwords on "password update" pages
-Monitors password updates
Explain the reveal password feature - answerThe Password reveal feature allows end
users to see the passwords of their apps. This is especially useful if end users need to
reenter a long, complicated, and randomly-generated password into another device.
For this feature to to work:
An admin must enable Password reveal for the particular app.
The end user must have permissions to manage the app's password.
End users cannot reveal the password of an app configured with shared credentials.
The difference between Okta Mobile and Okta Mobility Management (OMM) -
answerOkta Mobility is the feature that embraces all the functions relate to use Okta
anywhere. Okta Mobile is the app that makes it possible providing the features for users
to login anywhere/anytime
Define Okta Mobile and Okta Mobility Managemen (OMM) capabilities and the customer
value proposition - answerOkta Mobile is a SSO app that gives you access to all your
applications with a single tap. OMM enables to manage end user's mobile device,
application and data. The admin can manage policies, remove apps from the list and
also wipe out data from user's device at any time
Describe Universal Directory (UD) as a user store and hub for Identity Management. -
answerUD is an interface between applications such as importing users from AD then
customizing attributes to be pushed into SalesForce. Also UD can have custom
attributes for specific apps such as manager's email then provision/push it to the app
Define user profiles, user attributes and App User profile in Okta - answerUser profile is
a logical group of attributes that represents an account. User attributes. User attributes
